4pcs

啊弥陀佛

微点砍掉

woai_jolin

Time        Module        Object        Name        Threat        Action        User        Information
2008/5/27 13:43:10        DMON        archive        http://bbs.kafan.cn/attachment.p ... 49&t=1211866969        multiple infiltrations        quarantined - deleted        Jason-PC\Jason

The file 'ad(1).js' has been determined to be 'MALWARE'. Our analysts named the threat DR/Cinmus.fbc. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.96.

The file 'ad.js' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:ad(2).js<NSIS>:cpush.dll <- Adware.Bho.Aai : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:ad.js<NSIS>:9.sys <- Downloader.Agent.Nas : No action



Scanned objects : 16

Infected objects : 2

allinwonderi

[Found downloader]         <W32/Downloader.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\4.rar->ad(3).js

---------------------------------------------------------------------
Scan ended:        2008-5-27, 20:00:54
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------